Cybercriminals are rapidly expanding their tactics, using fake SMS messages to steal personal and financial information. The FBI Warning urges all iPhone and Android users to delete any suspicious texts immediately. Hackers have registered over 10,000 malicious domains to spread these scams, tricking unsuspecting victims into clicking dangerous links.
These messages are easy to spot—ignore them, delete them, and never engage.
New Cyber Threats: A Growing Concern
A recent report from Palo Alto Networks’ Unit 42 reveals that a new wave of scams is targeting users across the U.S. These deceptive messages attempt to steal credit card details, banking credentials, and other sensitive information.
The initial scam involved fake toll payment notifications, but now fraudsters have expanded their reach by impersonating delivery services and other familiar businesses.
The Federal Trade Commission (FTC) warns that responding to these messages could lead to identity theft. Clicking any embedded link can install malware on your phone, giving hackers access to private data.
How the Scam Works
Smishing (SMS phishing) scams follow a predictable pattern:
- You receive a text claiming you have an unpaid bill.
- The message includes an urgent request—pay immediately to avoid penalties.
- A fake link is provided for payment.
- Hackers steal your information once you enter your details.
FBI Warning: Don’t Fall for These Fake Domains
Scammers are now using Chinese-registered domains to trick people. The FBI reports that .XIN TLD (top-level domain) is a red flag in these phishing attacks. Below are examples of fraudulent web addresses:
- dhl.com-new[.]xin
- fedex.com-fedexl[.]xin
- sunpass.com-ticketap[.]xin
- usps.com-tracking-helpsomg[.]xin
These domains are designed to mimic real websites, making it easy for victims to fall into the trap. Even if a URL contains “.COM,” do not assume it’s safe. Always verify through official channels before making any payments.
Fake Toll Payment Scams Are Spreading Fast
According to Bleeping Computer, cities across the U.S. are experiencing an increase in smishing attacks. Warnings have been issued in:
- Boston, Houston, Charlotte, San Diego, New York, and many others.
Security experts also note that scammers often misplace dollar signs in payment requests. In the U.S., “$20” is the correct format, but scammers may write “20$” instead—an obvious clue that the message is fraudulent.
Cities Most Targeted by Smishing Scams
A report from McAfee highlights the top U.S. cities affected by fake toll payment scams:
- Dallas, TX
- Atlanta, GA
- Los Angeles, CA
- Chicago, IL
- Orlando, FL
- Miami, FL
- San Antonio, TX
- Las Vegas, NV
- Houston, TX
- Denver, CO
If you live in one of these areas, be extra cautious. Delete any suspicious texts immediately.
State Officials Are Now Warning Citizens
Authorities in Louisiana, Maryland, Virginia, and Georgia are taking action after residents reported receiving fraudulent texts.
Louisiana Attorney General Liz Murrill confirmed that she herself received one of these scam messages. “It is a scam. Never click on these links,” she warned.
How to Spot a Fake Toll Payment Text
- Look for unusual web addresses – Scammers often use small changes like missing letters or added hyphens (e.g., “geauxpass-la.com” instead of “geauxpass.com”).
- Watch for incorrect formatting – If the dollar sign appears after the amount (“20$” instead of “$20”), it’s a scam.
- Avoid unexpected urgency – If a text pressures you to act fast, be suspicious.
New Tricks Scammers Are Using
Investigations in Detroit found that fraudsters have added a new deceptive method to their attacks. When victims attempt to make a payment, their debit card is initially declined.
This is intentional! The scammer hopes you will try multiple cards, allowing them to steal even more financial information.
Officials in Indiana, North Carolina, and Ohio have reported a sharp rise in similar scams. The FBI Warning stresses that you should never enter payment details on unfamiliar websites.
How to Stay Safe from Smishing Attacks
The FBI and FTC offer these simple steps to protect yourself:
- Ignore and delete suspicious texts.
- Do not click any links in unexpected messages.
- Check directly with toll services or delivery companies using official websites.
- Report scam texts to your mobile provider (forward to 7726).
- If you clicked a fraudulent link, secure your accounts immediately.
Why Mobile Users Are Prime Targets
Security experts at Zimperium warn that cybercriminals are shifting to a “mobile-first” attack strategy.
Why? People are more likely to trust and click text messages than emails. Since phone screens are small, it’s harder to spot fake links.
Key Takeaway: Stay Alert and Delete Suspicious Texts
The FBI Warning is clear—these scams are spreading rapidly and evolving every day. Deleting these texts is the best way to stay safe.
Stay informed, verify information through official websites, and protect your personal data. If you receive a suspicious message, don’t hesitate—delete it immediately.
